Zerohunt
Programs
AboutSubmit a reportSign in
LabsCoursesConceptsVideosAcademy
← All courses
ExpertServer-side request forgery (SSRF)

Server-Side Request Forgery

SSRF turns a helpful feature into a window onto the internal network. This path goes from a link-preview you can aim, to the cloud metadata endpoint, to chaining a redirect into a private range.

Syllabus

  1. 1Understanding SSRFReading10 min
  2. 2Lab: the link-preview that fetches anythingLab45 min
  3. 3Lab: reaching the metadata endpointLab90 min
Zerohunt · bug bounty marketplaceBack to top↑

Break it before they do.

A trusted bug bounty marketplace: programs, scope, reports, triage, bounty, retest and reputation — in one workflow.

01Platform

  • Programs→
  • Services→
  • Pricing→
  • Hall of Fame→
  • Submit a report→

02For companies

  • How it works→
  • Company directory→
  • Request a proposal→

03Resources

  • All resources→
  • Academy→
  • Labs→
  • Community→
  • Talent→

04Company

  • About→
  • For researchers→
  • Trust & safety→
Zerohunt
© 2026 Zerohunt · All rights reservedTerms · PrivacyInternal Team Edition · v1.0